$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft File: eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json) Hash identifier: VqUpST0qThmCUgvtBxioBBssHDaiYUTVpzf+wiyuXA8= Subject key identifier: 6C:24:3B:1D:D3:9D:BF:27:2A:94:5C:8C:C2:A2:44:3A:E4:5E:AD:30 Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft Manifest number: 67 Signing time: Sun 01 Jun 2025 06:44:40 +0000 Manifest this update: Sun 01 Jun 2025 06:44:40 +0000 Manifest next update: Sun 08 Jun 2025 06:44:40 +0000 Files and hashes: 1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: fDd7In6/kW9PR8nKbId646uAT/ScXxocXAiU8yVji+I=) 2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Jun 1 06:44:40 2025 GMT Not After : Jun 8 06:44:40 2025 GMT Subject: CN=683bf6d8-178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:d7:1a:5e:1b:c7:21:24:04:e7:ba:29:da: c0:97:28:f7:41:b3:8c:cf:9a:fd:a5:cd:40:c9:3d: f9:3c:2d:15:dd:f1:e0:85:55:70:fd:4c:a4:2a:99: 72:f6:ce:87:a9:7b:ee:ef:ee:e3:0a:3c:bc:09:b3: b9:73:04:d4:12:0f:96:d0:44:88:c0:61:a9:67:73: 16:c2:06:b7:3d:d8:3b:d4:82:0e:f9:bc:08:58:29: c6:e5:81:2f:92:52:d1:54:7c:22:da:76:b1:c6:78: 5d:99:bf:bb:09:d2:9c:7a:8f:7c:14:dd:39:75:30: 5e:d6:c6:42:ad:26:5a:fd:f1:db:4b:a4:b3:6b:b4: 00:f4:61:29:6d:13:e9:b8:65:95:73:bf:86:b2:b2: 73:75:ec:36:d3:9c:dd:7a:50:96:a5:fd:a6:03:35: db:dd:eb:61:18:e2:4c:f4:3b:e6:f7:b5:de:fd:a8: d7:ee:8a:db:26:45:db:1f:bf:b8:17:ce:45:70:40: 26:57:e3:2d:93:a1:8d:3c:d2:e0:ea:59:ac:89:dc: bb:df:5f:f8:28:f5:78:e6:91:5d:ac:63:22:05:9b: 96:ea:71:b8:d0:a1:a1:22:06:cd:8c:18:3e:16:7b: be:13:6c:98:17:a1:91:1b:67:76:91:d0:e8:ca:e9: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:24:3B:1D:D3:9D:BF:27:2A:94:5C:8C:C2:A2:44:3A:E4:5E:AD:30 X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7e:76:ea:88:f1:70:4d:38:d7:2b:0b:a7:f4:5b:81:71:07: 14:38:ab:63:d9:43:89:f3:55:c2:a3:4e:ac:f1:0b:87:83:3c: 78:a2:ad:05:26:5b:42:e9:1c:c2:02:91:45:4d:e3:e8:5b:79: 47:17:df:56:1e:ab:75:94:21:33:ee:70:1d:db:1d:35:f3:8d: 65:3c:b3:fc:39:fa:30:93:34:cb:20:b4:65:06:a1:3e:8f:4c: 83:f2:34:6e:32:4d:4e:64:97:94:07:1a:ef:48:bd:00:3d:3f: b9:ed:ec:8e:90:77:bc:7b:c3:e4:79:b5:b6:51:8c:85:cc:f7: b3:e5:2e:0a:42:8f:f7:08:2e:18:eb:c0:1a:97:96:6e:c7:cb: 76:83:57:2f:85:a5:71:46:b5:b9:82:71:38:75:39:e0:31:30: 93:2e:e3:1b:2c:8f:03:82:cc:58:54:42:1c:a9:1b:b0:a4:59: d7:0b:50:98:8e:60:c8:99:78:3f:75:88:19:ad:d1:55:38:76: d1:d9:4e:06:e6:a5:1e:e9:d4:d0:91:90:7a:aa:56:cf:20:d3: a8:08:fc:49:23:7e:fd:5a:de:ef:6b:19:cf:67:40:19:e3:75: dc:c7:db:f4:c6:26:07:bc:17:29:f8:87:99:8d:17:1b:07:d6: f0:f2:df:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTkyQzExMC8GA1UEBRMoNzkyNjgzODA2QzhCRTNBQzEzNjE0RDM3NUU5MDE5Mjc0 MDk5QkM3QjAeFw0yNTA2MDEwNjQ0NDBaFw0yNTA2MDgwNjQ0NDBaMBgxFjAUBgNV BAMTDTY4M2JmNmQ4LTE3OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrcdcaXhvHISQE57op2sCXKPdBs4zPmv2lzUDJPfk8LRXd8eCFVXD9TKQqmXL2 zoepe+7v7uMKPLwJs7lzBNQSD5bQRIjAYalncxbCBrc92DvUgg75vAhYKcblgS+S UtFUfCLadrHGeF2Zv7sJ0px6j3wU3Tl1MF7WxkKtJlr98dtLpLNrtAD0YSltE+m4 ZZVzv4aysnN17DbTnN16UJal/aYDNdvd62EY4kz0O+b3td79qNfuitsmRdsfv7gX zkVwQCZX4y2ToY080uDqWayJ3LvfX/go9XjmkV2sYyIFm5bqcbjQoaEiBs2MGD4W e74TbJgXoZEbZ3aR0OjK6eidAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbCQ7HdOd vycqlFyMwqJEOuRerTAwHwYDVR0jBBgwFoAUeSaDgGyL46wTYU03XpAZJ0CZvHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBOTJDL0E1MjgxNEQyQTYw RTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNhRGdHeUw0NndUWVUwM1hwQVpKMENadkhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB OTJDL0E1MjgxNEQyQTYwRTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3 VFlVMDNYcEFaSjBDWnZIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADt+duqI8XBNONcrC6f0W4FxBxQ4q2PZQ4nzVcKjTqzxC4eDPHiirQUm W0LpHMICkUVN4+hbeUcX31Yeq3WUITPucB3bHTXzjWU8s/w5+jCTNMsgtGUGoT6P TIPyNG4yTU5kl5QHGu9IvQA9P7nt7I6Qd7x7w+R5tbZRjIXM97PlLgpCj/cILhjr wBqXlm7Hy3aDVy+FpXFGtbmCcTh1OeAxMJMu4xssjwOCzFhUQhypG7CkWdcLUJiO YMiZeD91iBmt0VU4dtHZTgbmpR7p1NCRkHqqVs8g06gI/Ekjfv1a3u9rGc9nQBnj ddzH2/TGJge8Fyn4h5mNFxsH1vDy3yw= -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:50 2025 by rpki-client